Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
15a3acd73ebefb357c91c423b1f32fed_JaffaCakes118.exe
Resource
win7-20240903-en
Target
15a3acd73ebefb357c91c423b1f32fed_JaffaCakes118
Size
1.8MB
MD5
15a3acd73ebefb357c91c423b1f32fed
SHA1
13262b3ea787eaa0e0782a08726ccf25a5d18609
SHA256
a83fbe3af5cb694daea39621e1278f627f057465d2c0475e4772ba589fe5e03a
SHA512
fcc872d5f5453d8c147a26d4b07fe93c0aa62d341ec5c3415259f8c0b6d5b8cc63e4a44f10c197d56f8a1e5459d2d70a178fcc0e69063587e17a07d8b8e7621e
SSDEEP
24576:ocvZsD/+HXcTYssBQC4ASN9t4g+ViwwxjkwfNkcNq5+IO9f/s9rp/373MK1HBe7e:TZ4W3osBQC7WXCVSxj/fNvK2IrB72Zi
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
9̙˕/��~�8/4'�5�k��7�6S���7�Oq�s$L<��6j���p�����������&�`잜@��C:�P����^���A�����NL��|�d���:Z��N�G���9���N�RBIXw�n�37FS�KB�ڴl'匴³�ӝw�C\d3äυCʽuPj�g{ݚ�l���1�m'���U�Ӽ q��k��J6m44�F������M�y� �,S���8��=�xU�}D���&��Mt�4f�`����������4��"M"p-i�a=S{Y�cv~�Z�� ��g'� �'��Ik�-ۭ�>!�G����G&�1��L�J��zÅ��f��?��\o2&�qc��E,�_���hD@�f差k��@�n2��=���)��:�5���մ������L*P1��UY��� �(\��E��mJ&1�������Z��&�*քh'mU����`�*'�� ��W�˚`dޑU�~�����*�X>��iϤM���s�7nݾ�٧<:����`'�R�:� �Q��XO4@�h�b�)ܵ ��VD�u�EQ�h��s��aN/�����01j��d�I��`�f�'���c�n_����xJ��A��lqb�cb�1�k:�Y\�k� �Q)�۱�E:s9����<��� ��^���F��%ʻ�ޖb�ep�W#�|�b[����<M��f�۹H��S�;?1}i^�����ؖ^��H��� q CӅC@����6%�� "�z��� �>���~%��@0i�ְ��?��^�o�t~vox���D�!����2*(݈h��gҝ�B)N�`��H���ҡ �Ñb�(fkwK�U1,�E���,��h��sӨ�~<c���>�P���*a9k�U ��j]7������O.EU۴|�s]v0���w��N���Æ)�s�a��� G"k���fec)c��8ԨD��svP2c����){$ Kj�|��������%'Fٙ��wb��inEƠ:��,Km�k�~@��[P��ѫ�m\���-�Ň����)+�6M��*j�����+��[�b�G���+�FK�UZ�E?�l��Z��ď{l凢&C����1����<�; ^.5:�BU.8���H�e��$Mt�6 �4�.�+����vZ�b�a�9�L 5 ����_��w� ���x8Ȏ�~�eg�Ģ3$�}������'HR�S�ʧ�sa��2�նˤ�w�d����s�>�)?�MOB{�g�X�Z������F�9�و�N�}+*i��4 ����������)7��Qo��#�2/��i��/�Hhokm����b��[+��#k��D%��/�H-N�~�7�� 3��yܘ�l���ŗ� `Q�OS4�1#H>�]d��������@mN4r���y"�f_�z�?�ҽ��iدBp��u���y.`�˰�yX�ϛn��H�r2`m��I�[�ˍN�8*1n�m�u���bN��,8l�,�ؙ�"~iU]@���<0��q2#��b�6�tS��W8%�tN�g�������Y���ϝ;{8�/�mv�7!wѲ85�o0�AN�x�\�$;$_��`��n��1�)1(� A˖x������f��]}1�|�~`u�S;l<�����$�j0�hؕ��R@�bcm��r�r�f�o�C���CkWŔF�Y����r�>��Y�T�����pl�i��)"��>��0�VMzу�*j�3��~�8�<x<�o�A�ʳ�A��S?c���o�LY뷀�b��� ���9?\҈��H�e�y�|%� �,kd}�z���.� R��z7��t��R������XQ.�����̥����<0.L����\��D-�#�����l�#�k����<�qP���)E幆���S��l���(����*П�g� b�E� ���\�6C���ϗ�̻�'Iq���/�YB����F�yA�,̠��I7�������_&������f mc9EtM�x��Mq�{�yd�����Y�j2B_,�iG�V�1 ��e����߭�?�U�J�6�g�buK�ίS�>�����Փ�˰��S�G�H�\������Ͻ�"������nL��_ؼu;3����%Nw7����|�.b��B7LG��}V4��c���2�#c��w��N?It87��cu��d[q��8μt��u�K~��g�y��������p���6�����t�.�]�C���R".^�Օ+�||Gz��*K�d��d�?�^�y�`�`���<��E8S�a��� h~1����lz��S��a?|�.�[�@�t6����Y�>:��ݐ�{��HcL� �V�@C-��nb[ԣ� ���O5͡C�^H~���FtTP���P2˚;Q��~\���!�g��ZზsD ��_��d���Vab������ <�L�RO?���) K���_��=Kl�%H���Oj���kO��&�"�(�f��q���}fb�e�N��=����"�0�@�'�q�l8��t(���J���/W����J�~*�C��pPw/�4|7�Y����r`>W��x�Q 6���7I�����Q�~���`��*�pZ�j���8�~:τ8���1��Z��2]�<���1O��,��na�Kv�$T�T��Y���������4�πSd��ήƠ�ܙ ���M���:�/CIM�jwi�J���8Rw}�ˠ���wx +�ڙ�g�r�6���_��9CưE�H�^6�� ٫��l�i���!��D������?��k6�;?�?� ��s�.�_]�7�uYO�ZXbm������M����7�Y�M�;�&z�|��5����!��t�w���|�5���� y�Jo!#���E��Op�L� ���; �¹����|�g���.v�W�F�iM �Yͬ��`��x�FU���Q/����:�H0`=�%���ըM?��c[���Fae>?��ju�g\9�I��PO��=��T3uP�Uؘ�B������ed:b���2�/�_��$g��X�R`]�aM6�̓8��e�����f�עW��?�P�r6�5���0���,����g�V���6\ ��mn��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE